ston1th/gowiki
0
0
Fork 0
Code Issues 2 Releases Activity

fixed a bug where search returned internal pages to unauthenticated users

Browse source
This commit is contained in:
ston1th 2018-10-28 00:08:35 +02:00
commit f90e8b84b2
2 changed files with 24 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
pkg/server/handler.go
View file

@ -181,7 +181,17 @@ func searchHandler(ctx *Context) {
ctx.Error(err)
return
}
ctx.Data.Data = res
user := ctx.User()
r := make([]core.Result, len(res))
i := 0
for _, v := range res {
if ctx.Srv.DB.ValidatePage(v.StoreTitle, user) {
r[i] = v
i++
}
}
ctx.Data.Data = r[:i]
ctx.Data.Search = search
ctx.Exec()
}